Yes, full role-based access control and audibility is key. This also highlights the need for data masking built into these DB systems. If data is gold, you need vaults to protect it.